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~ The MAILING DATE of this cbmmunlcatlon appears on the cover sheetwltif the correspondence address - 
Period for Reply 

i 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM |THE MAILING DATE OF THIS COMMUNICATiON. 

- Extensions of time may be available under the provisions of 37.CFR 1 . 1 36(a). In no event, however, may a reply bie timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

• - If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by 8tatute,.cause the application to betome ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). . < 

Status ' J • 

1)13 Responsive to communicatioh(s) filed on 23 September 2003 . 
2a)n This action is FINAL. . i 2b)IEI This action is non-final; | ; 

3) D Since this application is in condition for allowance except for fonrial matters', prosecution as to the merits is 

closed in accordance with the firactice under E)i' parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. . 

Disposition of Ciaims 

4) KI Claim(s) 1-16 is/are pending in the application. : , * 

4a) Of the above claim(s) j_ is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowec;!. . : ' 

6) ^ Claim(s) 1-16 is/are rejected.! ' ' ' ; • j i ■ 

7) Q Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers . ; 

9) n The specification is objected tb by the Examiner. ' 

10)0 The drawing(s) filed on j is/are: 3)0 accepted or b)n objected to by the Examiner. 

Applicant may not request that ainy objection to the drawing(s) be held in abeyance.; See 37 CFR 1 .85(a). 

Replacement drawing sheel(s) including the correction is required If the drawihg(s) is objected to. See 37 CFR 1.121(d). 
1 !)□ The oath or declaration is'objected to by the Examiner. Note the attached Office Action or forni PTO-152. 

Priority under 35 U.S.C. §119 

12)0 Acknowledgment is made of 4 claim for foreign priority under 35 U.S.C. § 1 i9(a)-(d) or (f). 
a)n All b)n Some * c)^ Norje of: 

lO Certified copies of the priority documents have been deceived. i i 

2.n Certified copies of the priohty documents have been received in Application No. . 



3.D Copies of the cdirtified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). ; ' . 
* See the attached detailed Office action for a list of the certified copies not received. 
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Attachment(s) ' I 111* 

1) S Notice of References Cited (970-^92) . 4) □ Interview Sunfimary (PTO-413) 

2) □ Notice of Draflsperson*s Patent Drawing Review (PTO-948) Pf Per No(s)/Mall Date. . 

3) S Information Disclosure Statement(s) (PTO/SB/OS) 5) □ Notice of Informal Patent Application 

Paper No(s)/Mail Date 11/24/03 . . . ^ 6) □ Other: [. . 
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, . DETAILED ACTION 

I 

^nfonnation Disclosure Statement ■ 

1 . The examiner has (|onsidered the information disclosure istatement (IDS) 
submitted on 24 November 2003. 

Qlaim Rejections 35 use §102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this jOffice action: 

A person shall be entitled to a patent unless^ . 

(b) the invention was patentee! or described. in a printed publication in this or a foreign country or In public 
use or on sale in this country, more than one year prior to the date of application for patent In the United 
States. . ; . ' : i . 

. I i 

3. Claims 1 , 7-9, 1 5, dnd 1 6 are rejected under 35 U.S.C. 1 P2(b) as being 
anticipated by Clavister in "More information on RST Cookies". 

With regard to clainns 1, 7, 9, and 15, Clavister discloses a method for defending 
against a denial of service! attack perpetrated by a TCP stateless hog (Quick info), the 
method including the step^ of receiving a TCP connection request from a network 
source and establishing a TCP connection in response thereto (sending bogus TCP 
SYN) sending a keep-alive packet associatiBd with said tCP connection to the network 
source (bogus SYN ACK, Sidenote), wherein said keep-alive packet comprises an 

i : : 

invalid sequence number (seq + 1000000, sidenote) receiving a response to the keep- 

• • ! . '. , 

alive packet associated with said TCP connection from the network source (TCP RST 

Quick info) and determining whether the network source is a TCP stateless hog based 

i i ' ■ ; ' ' ■ 

on the received response ([Quick info). 

■ • i . ., , ■ 
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With regard tb claims 8 and 16. CIdvister discloseis the number of allowed idle 
connections as 0. 

\ Claim Rejections - 35 USC §103 

4. The fpllowing is a quotiation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: : 

(a) A patent may not be Obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have be^n obvious at the time the 
invention was made to aiperson haying ordinary skill in the art to which said subject matter pertains. 
Patentability shall not bej negatived by the manner in which the invention vyas made. 

5. Claims 2-6 arid 10-14 are rejected Mhder 35 U.S.C. 103(a) as being unpatentable 
over Clavister. '.■ , 

With regard to clain{i 2-6 and 10-14, Clavister discloses the limitations of claim 1 , 
as outlined above, but dods not disclose creating a randbm number to add to the 
sequence, but rather adds a million. Clavister specifically notes ;that this causes a 

problem, since the numbef is-predictable (sidenote). The examiner takes official notice 

i ' . " 

that random numbers are not predictable. It would have been obvious for one of 

i ' ■ . I : . 

ordinary skill in the art to change the Raptior/SEF RST cookies of Clavister to add a 

random number rather than 1000000, so i^ would not be predictable and to prevent the 

Stated weakness of Clavister. 

I • 

! Conclusion 

■j ■ ■ , 

Any inquiry concerriing this communication or earlier communications from the 
examiner should be directed to Jacob Liprnan whose telejDhone; number is 571-272- 
3837. The examiner can normally be reached on M-Fr. ' '^\ [ 
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i , • ' 

If attempts to reach the examiner by telepihone are, unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on 571-272-3811. The fax phone number for 
the organization where thi^ application or proceeding is assigned is 571-273-8300. 

i = • ; . 

Information regarding the status of an application; may be pbtained from the 

Patent Application Irifo^mation* Retrieval (PAIR) s^^ ' 

published applications may be obtained from either Private PAIR or Public PAIR. 

I i 

Status infomriation for unp^jblished applications is available through Private PAIR only. 

i ■ . . . , : ' ■ ' • • i ' 

For more information about the PAIR system, see http://pair-dir6ct.uspto.gov. Should 

you have questions on access to the Private PAIr system, contact the Electronic 

Business Center (EBC) at 1866-217-9 197 (toll-free). If you would like assistance from a 

USPTO Customer Servicd Representative or access to the automated infomriation 

system, call 800-786-91 9Si (IN USA OR CANADA) or 571-272-l6d0. 
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